Project Sekai - ✅-misc-helpmeeeee

Project Sekai

🔒 CrewCTF 2023 / ✅-misc-helpmeeeee

helpmeeeee - 1000 points

Category: Misc Description: A woman named Azuradonia Sylyxion was working at a store. One day, while she was working, she was suddenly kidnapped by a robber who had been planning the act for a long time. Azura was abducted and taken to an unknown location. After being missing for a few days, a letter arrived at the store where Azura worked. The letter was written by the kidnapper and contained an address where she could be released. The letter instructed Azura's boss to bring a ransom to the address and give it to a man who would come to pick it up. Please find me, where i found the robber Author : st4rn Files: No files. Tags: osint

Sutx pinned a message to this channel. 07/07/2023 10:32 PM

@enscribe wants to collaborate

found it

Image attachment

Image attachment

lol why are there two colored cars

00:31

whoever works on this

00:31

https://www.google.com/maps/place/One+Stop/@53.5680795,-2.0741871,17.75z/data=!4m6!3m5!1s0x487bb872a533445d:0xb1fea48f978d9862!8m2!3d53.5677496!4d-2.0748249!16s%2Fg%2F1tdkg610?entry=ttu

One Stop · 85 Coleridge Rd, Moorside, Oldham OL1 4RJ, United Kingdom

★★★★☆ · Convenience store

00:31

whoever works on it, here it is

@Violin wants to collaborate

@Legoclones wants to collaborate

alright lets get this one

04:25

i gotchu enscribe

04:26

okay so store is One Stop at 85 Coleridge Rd, Moorside, Oldham OL1 4RJ, United Kingdom

04:27

we just need to find letter and go to the address specified in it

04:30

azuradonia joined flickr in april, so probably looking for an artifact created around then (3 months ago) (edited)

04:31

onestop is pictured once, but not sure that's actually where she works...

04:34

I think she works at the school across the street

04:34

because all pictures focus around that point, only one points at onestop

04:35

okay actually photos may have back of onestop not sure

Legoclones

I think she works at the school across the street

https://www.google.com/maps/place/St+Thomas%E2%80%99+Moorside+C.E.+(V.A.)+Primary+School/@53.5675475,-2.075202,3a,75y,108.03h,93.09t/data=!3m6!1e1!3m4!1sEn1DoJpgbscO-hrMNit_kA!2e0!7i13312!8i6656!4m15!1m8!3m7!1s0x487bb872a533445d:0xb1fea48f978d9862!2sOne+Stop!8m2!3d53.5677496!4d-2.0748249!10e5!16s%2Fg%2F1tdkg610!3m5!1s0x487bb872a533445d:0x99acb53bf388cfcd!8m2!3d53.5673968!4d-2.0747903!16s%2Fg%2F1tglyjq3?entry=ttu

04:39

okay no I'm just going crazy, chall description does say she works at a store, not a school

04:42

facebook page for one stop - https://www.facebook.com/OneStopOldham1654/about/?ref=page_internal

i think a few ppl were asking on discord

04:47

might need to ask admin ig

no ticket bot

dm admin directly

said he can't confirm

6 people checked in on Facebook, but it doesn't allow you to see who

04:52

been looking at reviews on random sites but nothing so far

04:56

currently osint all people who left reviews anywhere in last 4 months

just combed through one stop's entire twitter feed for the last 4 months, looking at replies and comments for a letter - nothing

05:16

I'm sure "robber" has something to do with it bc it's in code format, but not sure what

05:16

google doesn't give anything

05:19

idk where else to look for this one stop convenience store, so imma look at other surrounding stores now

05:25

even less about the stores next to it

05:26

yeah idk where to go from here

05:26

@enscribe lmk if u have any ideas when u wake up

Okay I messaged admin progress and this is the clue he gave -

the robber only sent a letter to the store, so you look around at the store, message from robber readable by us and it's a picture

07:59

so we're looking for a picture inside the store?

??????

enscribe finish up?

08:01

good morning

this shit is so ridiculous LOL

08:01

I'm jetlagged

hi jetlagged im legoclones

I'll be home by like 1pm pst

1

Legoclones

hi jetlagged im legoclones

Justin when I meet you at defcon I will tear out your hear

1

08:02

hair

08:02

peepoo

hhahahahahahahah gotem

08:03

Im gonna try to finish up fighter jet first then I'll come back to this mb

dw it's a shit challenge, are there any solves?

no

08:05

but we can blood with SE maybe

08:05

needed for 1st

08:06

dont think crazyman team knows proper SE

I said "What do you mean 'readable by us'?" and he said "its can see for all"

no idea what that means

08:14

I also asked "when u say 'look around at the store' u mean inside?" he said "no, outside"

08:15

Image attachment

08:16

waiiiiiittt

08:16

pics on google maps were taken march 2023, so it could def be that!

08:17

that looks like a letter

Image attachment

is this it?

08:47

didnt see anything tho, send link?

is what it?

08:48

wdym

Legoclones

Click to see attachment 🖼️

idk

08:48

thought you are one step closer msfrog

msfrog

yeah I think the letter is on the door

08:48

but it's too fuzzy

08:48

gonna have to somehow get better picture

08:48

but working on fighter jet rn

kk

@Surg wants to collaborate

@Guesslemonger wants to collaborate

only stretch at the front and side is march 2023, rest is 2012

10:01

on maps, strange

yeah, i thought a letter might be behind the store

guys's house might be nearby and he be holding a letter lol

most likely need 2023 version, idk why it is not there on maps

it might not exist

u sure it's not the letter on the front? That has the 2 pounds symbol

10:19

on the door

Legoclones

that looks like a letter

this one?

umm, it looks like some 2 pound thing

10:20

is it a letter?

i'm guessing so

10:21

like they just taped the piece of paper/letter on the door

i don't really think we can get higher res than street view

10:24

so strange

10:26

ask if the letter is hidden or something, looked at store at all angles already

10:28

that NHS thing? life saving lol

Legoclones

Click to see attachment 🖼️

maybe continue SE admin? still no solve, and i think he is open to giving suggestion from legoclones chat

is it on modmail or DM?

modmail

11:18

dm

11:18

sorry

11:18

its dm

yeah messaged him again

11:26

can you find who has taken pictures and geometadata puts them there?

11:27

like geotagged photos

11:27

i feel like that should be a thing (edited)

11:33

like have it go through social media

11:33

idk

as per convo, it just seems that we have to find some picture on maps somehow

11:34

on street view, since he asks to align

11:34

same direction as pic

i don't understand what he means by rotate

Image attachment

i do think the maps is a red herring

11:36

cause the whole main road has been updated to 2023, right?

11:36

how do you plan a ctf chal with google doing their thing

yeah idk

and its not a user-uploaded photosphere

okay so where else can we find photos of this place

11:37

and what does he mean by rotate, I just don't get it

presumably off the path of how we got to find this location

11:37

he mentioned the flickr, no?

yeah

11:37

https://www.flickr.com/photos/198139388@N05/52836780338/in/photostream/

AzuradoniaSylyxion

Explore AzuradoniaSylyxion's 13 photos on Flickr!

11:37

that's how we found the shop in the first place

11:37

should be 10 photos under her name

11:37

they circle that shop, almost all sides

they are the same photos on twitter

where on twitter?

https://twitter.com/azuradoniasylyx

bro she has a twitterrrrrrr

she follows elon musk

there is 1 extra pic on flickr, but not that useful

11:44

going around in street view like flickr pics doesn't help, entire back side is old photos

11:45

ok it's blooded

11:45

so chall works lol

who fredd fan club

11:46

author said maps is not right path

wut

Image attachment

11:47

so not looking on google maps ig

where the fuck do i rotate then lol

reverse image searched profile and one of the photos, nothing

11:48

bro that's what I'm saying

"For the helpmeeee challenge : it has been updated, if you have found the message you got, try the message, Sorry for all the inconvenience

"

sahuang

"For the helpmeeee challenge : it has been updated, if you have found the message you got, try the message, Sorry for all the inconvenience

"

I think that just means the flag was updated

11:49

like it was wrong

11:49

and thats how it got blooded

11:49

someone found flag but they had it wrong

11:49

cuz description looks the same to me

nothing on wayback

so we know there's a picture of a letter outside around the store, it isn't on google maps, something about rotating

11:50

is there anything else we know?

no comments on any photo on flickr

or twitter

hoping no steg in images

yeah that would suck

11:56

but also wouldn't make sense

probably need to find more social media accounts

11:57

for more photos lol

manual search on facebook and linkedin gave nothing, searching AzuradoniaSylyxion and azuradoniasylyx gave nothing from sherlock

12:09

google doesn't have other social media profiles, and reverse search of images gave nothing

yup no idea

they updated?

flag format most likely

ok going to look into this, dont think others are doable from my current setup

13:42

do i need to read everything

Legoclones

so we know there's a picture of a letter outside around the store, it isn't on google maps, something about rotating

this is main idea, history has stuff we tried but didn't find

did we try image metadata on all twitter or flickr images? @Legoclones

no, I haven't looked at any metadata

Legoclones

Click to see attachment 🖼️

"so you look around at the store, message from robber readable by us" where else could you look around the store besides google map? also what message did he send after this? why he said google maps not right path

@Legoclones ^

sahuang

"so you look around at the store, message from robber readable by us" where else could you look around the store besides google map? also what message did he send after this? why he said google maps not right path

I think this is why: https://discord.com/channels/919744111391698945/1127109887080534108/1127307147756183664

14:16

using maps helped us find the location

14:16

but we need to look elsewhere for the actual letter...

ik, he said map is wrong path, but im just wondering how do you look around/"rotate" without map

youtube 360 /s

14:18

my best guess is there's something we're missing to lead us to a different image/photosphere/map/etc.

Legoclones

https://www.flickr.com/photos/198139388@N05/52836780338/in/photostream/

actually 1 qs, why these pics view dont match that shop

enscribe

https://www.google.com/maps/place/One+Stop/@53.5680795,-2.0741871,17.75z/data=!4m6!3m5!1s0x487bb872a533445d:0xb1fea48f978d9862!8m2!3d53.5677496!4d-2.0748249!16s%2Fg%2F1tdkg610?entry=ttu

One Stop is red?

14:19

but flickr images show that old house

hmm

14:20

i think that means that between when those photos were taken

14:20

and when google passed by

14:20

the red backing fell off

14:20

because older images had the red backing but different logo sign

yeah

14:20

its blue now

OH

14:21

you mean the school

no store

14:22

https://www.google.com/maps/@53.5676476,-2.0747268,3a,75y,322.71h,79.51t/data=!3m6!1e1!3m4!1svFO5uYQApl51wF8eI0BgHg!2e0!7i16384!8i8192?entry=ttu

Find local businesses, view maps and get driving directions in Google Maps.

14:22

it is blue

but also the school changed colors lol

Image attachment

14:22

Image attachment

yeah everything seems changed colors

blobsweat

why her image is red lol

14:23

wtf

I KNOW

14:23

because even looking at the old photos of the school its blue in 2015

wut

So between march 2023 and 2015, it went from blue to red to blue

thing is they made the chal in 2023 mar

14:24

and they used the old photo?

14:24

so the letter was something there already, instead of what they put themselves?

14:25

from my current understanding it seems we need to find a picture near the store which contains a letter pointing to the next place, right? and we dont know if this letter is what they put, or already there. admin also said google map is wrong path ??

Surg

So between march 2023 and 2015, it went from blue to red to blue

wait

that remark i feel like is more of a silly observation than something to chase

which one

the colors of the school

not school, i mean the store

14:29

Embedded image

14:29

it shows red background with blue "one stop"

14:29

none of the google map version shows this

14:29

except the cover

14:30

there are 4 versions

14:30

none has this

14:30

thats what im confused about

14:30

this photo seems to be taken by someone bypassing there

hi

14:31

what are you guys confused about

sahuang

yeah everything seems changed colors

repainted from old image

14:32

prob

i mean the logical timeline is:

chal gets made
storm/construction/whatever rips off red backing, leaving just the wood
google does a refresh of the road, and we get the deteriorated version of the building.

hmm

b/c this is march 2023, right?

Image attachment

yeah

14:33

that could be true

i think this is a series of unfortunate coincidences

sahuang

from my current understanding it seems we need to find a picture near the store which contains a letter pointing to the next place, right? and we dont know if this letter is what they put, or already there. admin also said google map is wrong path ??

is this correct?

If what the admins said is true, i think so

so somewhere else has the image around this shop i guess

14:34

which has a letter somehow

14:34

anyone checked linkedin

14:34

oh lego did

oh...

Image attachment

also is robber a real thing

14:35

cuz apparently they cannot put that in google maps

14:35

so if there's a "robber" they made intended with a letter, it means its somewhere else

14:35

from description i believe the letter is what author made

14:36

so indeed googlemap prob just gives a rough place

14:37

checking admin msg

the robber only sent a letter to the store, so you look around at the store, message from robber readable by us and it's a picture (outside store)

14:37

also why its not maps when you can rotate wtf

14:39

also anyone searched her flickr avatar?

no results

14:41

based on her earing i think its a thispersondoesnotexist.com profile

ic

14:42

agree yeah

yeah reverse image search didn't give anything

14:58

also tried with another pic she posted but nothing

i think what needed to understand most is why he said google map is wrong path to you but also said rotate images in flickr??

i wonder if it's bad translation or something idk

i stg if this is a pun

Image attachment

yeah I'm guessing paper letter, but it might just be alphabet letter....

15:10

can we ask? clarify?

i think our door for social engineering is more or less closed

Legoclones

yeah I'm guessing paper letter, but it might just be alphabet letter....

let me ask

okay but if it's a pun...... that's like next level evil lol

1/25

15:46

¯\_(ツ)_/¯

have i sent the msg?

15:47

just got bad conn

took me forever already to just find that location in general

15:47

and for me to pinpoint every single image around that city in the uk

15:47

and for it to be step 0 and not matter without direct lead or reward is just a sign of a poorly designed challenge (edited)

15:47

lol

did you see my msg

i haven't

Legoclones

yeah I'm guessing paper letter, but it might just be alphabet letter....

its like a paper letter. you'll see instructions which kind of guide you to solve

its @sahuang ?

17:20

scroll up rn

yeah

Legoclones

https://www.flickr.com/photos/198139388@N05/52836780338/in/photostream/

Legoclones

author said maps is not right path

Violin

yeah idk what to do from there

@Zafirr wants to collaborate

welcome to hell

big brain chal

a bunch of the streets around the place are also from mar 2023

20:33

idk if that has anything to do with the chall

Legoclones

author said maps is not right path

。

yeah but the author is indonesian so i think he might mean path as an actual path

20:39

idk though

wtf

just a guess on indo english level

hmm

20:40

so we need to walk around store and find the actual letter? weird since google map usually doesnt show clear readable letter

20:40

cuz they said like "its like a paper letter. you'll see instructions which kind of guide you to solve"

theres too many images though

i think i got

20:44

:

peepoo

how

how?

20:47

whats even the path

20:47

any progress

20:53

@Violin whats the progress peepoo

peepoo

peepoo

gonna sleep

21:01

got what

peepoo

21:01

peepoo maybe

Violin

used /ctf submit

✅ Well done, challenge solved!

HUH

21:10

WHERE

21:10

WHAT'

21:10

HOW

flickr have a map lol

21:11

Image attachment

is this a button on flickr somewhere on one of the photos?

https://www.flickr.com/map

Flickr: Explore everyone's photos on a Map

The safest and most inclusive global community of photography enthusiasts. The best place for inspiration, connection, and sharing!

ohhh

21:13

so you find the location

21:13

then go back to that map

21:13

wild

yes

crazy

21:13

wtf

21:14

holy shit

21:14

@enscribe ^

lmao

too strong

violin the guess god

admin said map is wrong path bro relates to flickr map

21:15

he said "GOOGLE MAPS" is wrong path

21:15

right?

21:15

shoulda said "different kind of map"

21:15

would have helped massively

Legoclones

Click to see attachment 🖼️

yes, i see it, google maps wrong path

kinda

so its a map

21:16

‍

failed to relate

21:16

guess god

21:16

gm2

21:16

msfrog

Makes sense now

Daaaaaaaaaaaaaaaanggg ggs violin too strong

Exported 336 message(s)